2022

A Remote Code Execution (RCE) vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.191

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in a

In ion, there is a possible use after free due to an integer overflow. This could lead to local escalation of privilege

In ion, there is a possible use after free due to incorrect error handling. This could lead to local escalation of privi

In voice service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local

In subtitle service, there is a possible application crash due to an integer overflow. This could lead to local denial o

In MM service, there is a possible out of bounds write due to a heap-based buffer overflow. This could lead to local esc

In MM service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local es

In aee daemon, there is a possible information disclosure due to improper access control. This could lead to local infor

In aee daemon, there is a possible information disclosure due to symbolic link following. This could lead to local infor

In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local in

In aee daemon, there is a possible information disclosure due to a path traversal. This could lead to local information

Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook me

TencentOS-tiny version 3.1.0 is vulnerable to integer wrap-around in function 'tos_mmheap_alloc incorrect calculation of

ARM mbed product Version 6.3.0 is vulnerable to integer wrap-around in malloc_wrapper function, which can lead to arbitr

ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead

ARM CMSIS RTOS2 versions prior to 2.1.3 are vulnerable to integer wrap-around inosRtxMemoryAlloc (local malloc equivalen

RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead

Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mm_malloc. This improper memory as

NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow

uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memor

eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc (an implem

Micrium OS Versions 5.10.1 and prior are vulnerable to integer wrap-around in functions Mem_DynPoolCreate, Mem_DynPoolCr

NXP MQX Versions 5.1 and prior are vulnerable to integer overflow in mem_alloc, _lwmem_alloc and _partition functions. T

Given the TEE is compromised and controlled by the attacker, improper state maintenance in StrongBox allows attackers to

DLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary

Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to ove

Improper authentication in Link to Windows Service prior to version 2.3.04.1 allows attacker to lock the device. The pat

Unprotected activities in Voice Note prior to version 21.3.51.11 allows attackers to record voice without user interacti

Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leadi

Improper buffer size check logic in wmfextractor library prior to SMR May-2022 Release 1 allows out of bounds read leadi

Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leadi

Improper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows out of bounds read leadi

Path traversal vulnerability in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to list file names in arb

Improper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to uninst

Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to

Improper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch arbitrary activity with

Improper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that attackers can access locati

A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_product of E-Commerce Website v1.0 allows atta

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service (DoS) via deleti

In ion, there is a possible use after free due to a race condition. This could lead to local escalation of privilege wit

In ion, there is a possible use after free due to improper update of reference count. This could lead to local escalatio

In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local in

In aee daemon, there is a possible out of bounds write due to improper input validation. This could lead to local escala

In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local in

In aee daemon, there is a possible information disclosure due to a race condition. This could lead to local information

In camera, there is a possible information disclosure due to uninitialized data. This could lead to local information di

In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In imgsensor, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat

In telephony, there is a possible way to disable receiving SMS messages due to a missing permission check. This could le